VDB
BDU%3A2024-01185
BDU%3A2024-01185
PUBLISHED
CVSS 7.5 HIGH
Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| OISF | suricata | >= 7.0.0, <= 7.0.2 |
| Open Information Security Foundation | Suricata | |
| oisf | suricata | 7.0.0 |
Timeline
- Feb 13, 2024 CVE Published
- Mar 14, 2024 PoC Published
- Mar 18, 2024 CVE Updated
References
- https://suricata.io/2024/02/08/suricata-7-0-3-and-6-0-16-released/ url
- https://github.com/OISF/suricata/security/advisories/GHSA-8583-353f-mvwc url
- https://redmine.openinfosecfoundation.org/issues/6411 url
- https://github.com/OISF/suricata/commit/86de7cffa7e8f06fe9d600127e7dabe89c7e81dd url
- https://github.com/OISF/suricata/commit/f52c033e566beafb4480c139eb18662a2870464f url
- https://github.com/OISF/suricata/commit/b0d762d2675a2441b74e039d54bfa5b050641f8e url
- https://github.com/OISF/suricata/commit/61a32360eba3c032de51029a05515ab46690286f url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/ url